CISA ICS Advisory: Schneider Electric SCADAPack x70 Products
Here’s what this advisory affects, and what to do about it.
Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the mitigations provided below may increase the risk of unauthorized access to RTU configuration through the Secure Lock functionality, potentially resulting in a loss of confidentiality. The following versions of Schneider Electric SCADAPack x70 Products are affected: SCADAPack 47x vers:all/* (CVE-2026-81861)
CISA published an ICS advisory on September 15, 2026, warning that multiple Schneider Electric SCADAPack x70 Remote Terminal Units contain a vulnerability in their Secure Lock functionality.
Watch this company
Get alerted the next time this company files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about this company’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Unauthorized access to RTU configuration via Secure Lock
The advisory states that failure to apply mitigations could allow unauthorized access to RTU configuration through the Secure Lock feature. This could result in a loss of confidentiality. The advisory does not state whether the vulnerability has been exploited in the wild.
- Every indexed leak tied to your address — all of them, named and dated
- What this kind of incident typically exposes
- A ten-minute lock list written for this kind of organisation
Affected products
The following Schneider Electric SCADAPack x70 products are affected:
- SCADAPack 47x versions: all
- SCADAPack 47xi
- SCADAPack 47xd
- SCADAPack 470R
- SCADAPack 57x
The vulnerability is tracked as CVE-2026-81861. These devices are Remote Terminal Units used for remote monitoring and control in industrial environments.
What to do
- Apply the mitigations published in the CISA advisory and by Schneider Electric.
- Determine whether any SCADAPack 47x, 47xi, 47xd, 470R or 57x units are present in your environment.
- Review current Secure Lock configurations on deployed SCADAPack x70 RTUs.
- Follow Schneider Electric’s official guidance for this issue.
- Monitor both the vendor’s security portal and CISA’s ICS advisories for updates.
Organizations operating industrial control systems should treat vendor-published mitigations for SCADAPack x70 products as high priority.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
Report details & sourcing
Related breaches
CISA ICS Advisory: mySCADA myPRO Manager
Successful exploitation of these vulnerabilities could allow an attacker to access privileged manage…
CISA ICS Advisory: Wärtsilä FOS-Onboard
Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized …
CISA ICS Advisory: Digital Watchdog VMAX DVR and NVR Product Lineups
Successful exploitation of these vulnerabilities could grant full administrative control of the devi…
